24 matches found
EUVD-2008-6149
Malware in sbrugna...
EUVD-2007-4147
Malware in sbrugna...
EUVD-2007-4053
Malware in sbrugna...
IndexScript <= 2.8 (show_cat.php cat_id) SQL Injection Vulnerability
No description provided by source. Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: This site is powered by IndexScript exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: $sql ...
Sql injection
SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...
CVE-2008-6179
SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...
CVE-2008-6179
CVE-2008-6179 describes an SQL injection in sug_cat.php of IndexScript 3.0. The root cause is improper handling of the parent_id parameter, enabling remote attackers to inject arbitrary SQL. This is a different vector from CVE-2007-4069. The connected PRION/NVD entries confirm the same vulnerabil...
IndexScript 3.0 - parent_id SQL Injection
IndexScript 3.0 - parentid SQL Injection ------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet...
IndexScript 3.0 - 'parent_id' SQL Injection
------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet easy-to-use directory script that you can...
IndexScript 3.0 (sug_cat.php parent_id) SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet...
indexscript30-sql.txt
------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet easy-to-use directory script that you can...
IndexScript 3.0 (sug_cat.php parent_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== IndexScript 3.0 sugcat.php parentid SQL Injection Vulnerability ===================================================================...
Sql injection
Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...
CVE-2007-4163
Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...
CVE-2007-4163
Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...
CVE-2007-4163
CVE-2007-4163: Concrete SQL injection vulnerabilities in IndexScript 2.7 and 2.8 (before 20070726) allow remote attackers to execute arbitrary SQL via (1) cat_id, (2) start_id, (3) row[parent_id], and (4) row[cat_id] parameters used in include/utils.php. The show_cat.php cat_id vector is noted as...
Sql injection
SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-4069
SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-4069
CVE-2007-4069 is an SQL injection in show_cat.php of IndexScript 2.8 and earlier, exploitable via the cat_id parameter to execute arbitrary SQL remotely. The connected records also reference related CVEs (CVE-2007-4163) describing similar injection vectors in IndexScript 2.7/2.8, noting the show_...
CVE-2007-4069
SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...